CVE-2007-5080

Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to execute arbitrary code via a crafted Lyrics3 2.00 tag in an MP3 file, resulting in a heap-based buffer overflow.

• CWE-189

• http://secunia.com/advisories/27361Patch, Vendor Advisory
• http://service.real.com/realplayer/security/10252007_player/en/Patch
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.kb.cert.org/vuls/id/759385US Government Resource
• http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/
• http://www.securityfocus.com/bid/26214
• http://www.securitytracker.com/id?1018866
• http://www.vupen.com/english/advisories/2007/3628
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37434
• http://secunia.com/advisories/27361Patch, Vendor Advisory
• http://service.real.com/realplayer/security/10252007_player/en/Patch
• http://www.attrition.org/pipermail/vim/2007-October/001841.html
• http://www.kb.cert.org/vuls/id/759385US Government Resource
• http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-real-player-id3-tags/
• http://www.securityfocus.com/bid/26214
• http://www.securitytracker.com/id?1018866
• http://www.vupen.com/english/advisories/2007/3628
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37434

Published

Oct 31, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5069Directory traversal vulnerability in data/compatible.php in …
• CVE-2007-5070Heap-based buffer overflow in the EasyMailMessagePrinter Act…
• CVE-2007-5071Incomplete blacklist vulnerability in upload_img_cgi.php in …
• CVE-2007-5072Multiple cross-site scripting (XSS) vulnerabilities in Simpl…
• CVE-2007-5078Multiple cross-site scripting (XSS) vulnerabilities in eGov …
• CVE-2007-5079Red Hat Enterprise Linux 4 does not properly compile and lin…
• CVE-2007-5081Heap-based buffer overflow in RealNetworks RealPlayer 8, 10,…
• CVE-2007-5082Multiple stack-based buffer overflows in Computer Associates…
• CVE-2007-5083Multiple integer overflows in Computer Associates (CA) Brigh…
• CVE-2007-5084Multiple SQL injection vulnerabilities in Computer Associate…
• CVE-2007-5085Unspecified vulnerability in the management EJB (MEJB) in Ap…
• CVE-2007-5086Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 1…